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Abstract 


Via competing provers, we show that if a language A is self-reducible and has polynomial-size circuits 
then S4 = S2. Building on this, we strengthen the Kamper-AFK theorem, namely, we prove that if NP € 
(NP N coNP)/poly then the polynomial hierarchy collapses to SENONP., We also strengthen Yap’s theorem, 
namely, we prove that if NP C coNP/poly then the polynomial hierarchy collapses to SNE; Under the same 


assumptions, the best previously known collapses were to ZPPN? and ZppNp™” respectively (SIAM Jour- 
nal on Computing 28 (1) (1998) 311; Journal of Computer and System Sciences 52 (3) (1996) 421], building 
on [Proceedings of the 12th ACM Symposium on Theory of Computing, ACM Press, New York, 1980, pp. 
302-309; Journal of Computer and System Sciences 39 (1989) 21; Theoretical Computer Science 85 (2) (1991) 
305; Theoretical Computer Science 26 (3) (1983) 287]). It is known that S2 € ZPpNP [Proceedings of the 42nd 
IEEE Symposium on Foundations of Computer Science, IEEE Computer Society Press, Silver Spring, MD, 
2001, pp. 620-629]. That result and its relativized version show that our new collapses indeed improve the 
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previously known results. The Kamper-AFK theorem and Yap’s theorem are used in the literature as bridges 
in a variety of results—ranging from the study of unique solutions to issues of approximation—and so our 
results implicitly strengthen those results. 

© 2005 Elsevier Inc. All rights reserved. 
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1. Proving collapses via competing provers 


The symmetric alternation class S2 was introduced by Canetti [16] and Russell and Sundaram 
[40]. In one model that captures this notion, we have two all-powerful competing provers, the Yes- 
prover and the No-prover, and a polynomial-time verifier. Given an input string x, the Yes-prover 
and the No-prover attempt to convince the verifier of x € L and of x ¢ L, respectively. To do so, 
they provide proofs (i.e., bitstrings) y and z, respectively. Then the verifier simply checks whether 
y is a correct (in whatever sense of “correct” that the verifier happens to enforce) one for x € L 
and whether z is a correct one for x ¢ L, and votes in favor of one of the provers. We require that 
if x € L then the Yes-prover has an irrefutable proof y that can withstand any challenge z from 
the No-prover; and if x ¢ L then the No-prover has an irrefutable proof z that can withstand any 
challenge y from the Yes-prover. Languages with such a proof system are said to be in the class So. 
We define the class formally in Section 3. 

When we allow the verifier to have access to an oracle A, we obtain the relativized class S4. Our 
main result gives a partial characterization for sets that are not useful as oracles to the verifier: 


Theorem: /f A is self-reducible and has polynomial-size circuits then 
S$ = So. 


We note that similar results are known for NPP [8] and ZPPN? [33]. The above result is useful 
in obtaining a number of conditional collapse results. For example, we can show that if NP has 
polynomial-size circuits then the polynomial hierarchy, PH, collapses to S2. This follows from the 
fact that SAT is a self-reducible many-one complete problem for NP. Though this result is already 
known (see [13]), our result provides a general method to obtain conditional collapses for other clas- 
ses. We can apply the theorem to other complexity classes with a set of self-reducible languages that 
are “collectively” many-one complete for the class (e.g., UP, FewP, NP, £? , @P). Moreover, by using 
a relativized version of the above theorem, we can obtain collapses for the first time to Se 
and She (under assumptions weaker than those yielding collapses to S2). For example, we will show 
that (i) if NP C (NP N coNP)/poly then PH collapses to Speen (ii) if NP € coNP/poly then 
PH collapses to See Previously the best known collapse results under the same assumptions were 


to ZPPN? and ZPPN?™ [11,33], building on [1,28,29,53]). Since S2 € ZPPN? [13] (and because this 
result relativizes), we see that the new collapses are indeed improvements. In Section 2, we discuss 
the motivation behind the theorem in more detail. 

We introduce and use the technique of a “dynamic contest” to prove the above theorem. The first 
hurdle is to show that if A is self-reducible and has polynomial-size circuits then 4 € S2. Upon input 
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x, Suppose each prover provides a circuit of appropriate size to the verifier. Of course, the honest 
prover can provide the correct circuit. And by simulating the circuit with x as input, the verifier 
can determine the membership of x in A correctly. But the issue is that the polynomial-time verifier 
needs to first find out which one of the two circuits is the correct one! The idea is to simulate the 
circuits on a sequence of successively smaller strings. The strings are chosen dynamically, using the 
self-reducing algorithm of A and the outputs of the circuits on earlier strings in the sequence. Using 
this idea of a dynamic contest between the circuits, we show how the verifier can always choose a 
correct circuit (if at least one of the two is correct). Then the honest prover can provide the correct 
circuit and win the vote, irrespective of the circuit provided by the other prover. We then extend 
the proof to show that S4 = S2. The details of this proof can be found in Section 4. 


2. Background and motivation 


Karp and Lipton [29], who in their work credit an important contribution by Sipser, proved that if 
NP C P/poly (equivalently, if some sparse set is Turing-hard for NP) then NPN? = PH. (For more 
on P/poly and other consequences of NP C P/poly, see, e.g. [4,31].) K6bler and Watanabe [33] (see 
also Bshouty et al. [11]) strengthened this result by showing that if NP C P/poly then ZPP? = PH. 
It is known ([3], see also [27]) that there are relativized worlds in which NP © P/poly does not imply 
the collapse of the boolean hierarchy (and so certainly does not imply P = NP). 

The just-mentioned Kd6bler-Watanabe result has itself been further strengthened, via the com- 
bination of two results of independent importance: First, Sengupta (see [13]) observed that an 
alternative proof of the Karp—Lipton theorem by Hopcroft [26] in fact shows that NP € P/poly 
implies S2 = PH, where Sz is the symmetric alternation class of Canetti [16] and Russell and Sun- 
daram [40]. Second, Cai [13] proved that S2 < ZPPP, thus showing that the Hopcroft-Sengupta 
collapse of PH to Sz is at least as deep a collapse as that of Bshouty et al. and K6bler-Watanabe. 
Currently this is the strongest form of the Karp—Lipton theorem. 

The Karp—Lipton result and the K6bler-Watanabe result have been generalized to “lowness” 
results. Regarding the former, we have for example the lowness result of Balcázar et al. ([8], see 
also [7,35]) that every Turing self-reducible set 4 in P/poly is low for NPP, i.e., NPNP* — NPNP, 
Regarding the latter, Köbler and Watanabe [33] themselves proved that every Turing self-reducible 
set A in (NP N coNP)/poly is low for ZPP?, i.e., ZPPNP* = ZPPNP. 

Why might one wish to make such transitions from conditional collapse results? A first rea- 
son is aesthetic and philosophical. Though conditional collapse results such as “NP € P/poly => 
NPP = PH” are certainly valuable (in fact, we will speak below about how lowness results flexibly 
unify and yield conditional collapse results), note that the related lowness result, “every Turing 
self-reducible set in P/poly is low for NPN?,” not only has the practical merit of (as can be shown) 
implying the former result, but also proves, unconditionally, that a class of sets (the class of all Turing 
self-reducible sets in P/poly) exhibits a simplicity property (namely, giving absolutely no additional 
power to NPN? when used as free information). A second reason why making the transition from 
conditional collapse results to lowness results can be valuable is directly utilitarian. Lowness results 
are generally a more broadly applicable tool in obtaining collapse consequences for a wide variety 
of classes. In practice, lowness results in our settings will often apply crisply and directly to all 
classes having Turing-self-reducible many-one complete sets, and even to all classes C having a set 
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of self-reducible languages that are “collectively” many-one complete for the class. Among natural 
classes having such properties are UP, FewP, NP, coUP, coFewP, coNP, D? ; m? , BP, and PSPACE. 
Even if it is possible to prove these results for each class separately, it is much more desirable to 
have a single proof. Making a transition from conditional collapse results to lowness results has 
been previously achieved for the Karp—Lipton X} result and for Kébler—Watanabe ZPPP result. 
The present paper essentially achieves this transition for the Hopcroft-Sengupta S2 result. 

We say “essentially” since Sz presents strong barriers to the transition—barriers that are not pres- 
ent, even by analogy, for the NPN? and ZPPP cases. The source of the barrier is deeply ingrained 
in the nature of S2. While NPN? and ZPPP both have as their “upper level” an unfettered access to 
existential quantification, S2 by its very definition possesses a quite subtly constrained quantification 
structure. For the case of P/poly, this problem does not affect us, and we are able to establish the 
following lowness result: All Turing self-reducible sets in P/poly are low for S2. However, for the case 
of (NP N coNP)/poly the restrictive structure of S2 is remarkably hostile to obtaining pure lowness 
results. Nonetheless, we obtain the following lowness-like result that we show is useful in a broad 
range of new, strongest-known collapses: For all Turing self-reducible sets A in (NP N coNP)/poly 
and all sets B that are Turing reducible to A (or even <';-reducible to A), S3 G SIENNE, 

In showing that the above lowness and lowness-like results do yield conditional collapse conse- 
quences, it will be important to know that Cai’s S2 C ZPP? result relativizes, and we note that it 
does. We also establish (as Theorem 5.6) that the Hopcroft-Sengupta result relativizes flexibly. 

So, putting this all together, we establish a collection of lowness results and tools that allow, 
for a very broad range of classes, strong uniform-class consequences to be read off from assumed 
containments in nonuniform classes. The most central of these results is that we strengthen the 
Kamper—-AFK theorem (which says that NP C (NP NcoNP)/poly => PH = NPP), relative to 
both its just-mentioned original version [1,28] and the strengthened version due to K6bler—Wa- 
tanabe [33]. In particular, we prove that NP C (NP McoNP)/poly => PH = SNE, Another 
central result we strengthen is Yap’s theorem. Yap’s theorem [53] states that if NP C coNP/poly 
(or, equivalently, if coNP c NP/poly) then PH = 4 . Köbler and Watanabe strengthened Yap’s 
theorem by showing that if NP C coNP/poly then PH = ZPP? [33]. We further strengthen Yap’s 
theorem, via showing that if NP C coNP/poly then PH = SP. (Note: She = ZPP™2 Cc DDA .) 

This paper explores the relationship between (NP N coNP)/poly and classes up to and including 
PSPACE. Regarding the relationship between (NP N coNP)/poly and classes beyond PSPACE, we 
commend to the reader the work of Variyam [49] and Vinodchandran [50], who shows for example 
that an exponential-time analog of AM is not contained in (NP N coNP)/poly. 

The paper is organized as follows. Section 3 presents definitions. Section 4 proves our main 
lowness theorems about S2. In Section 5 we use our lowness theorems, in combination with a close 
look at interactive provers, to obtain collapse results for many complexity classes. Section 6 presents 
some open questions. 


3. Definitions 


In this section we present the required definitions and notations. Throughout this paper all poly- 
nomials are without negative coefficients so they are monotonically nondecreasing and for alln > 0 


J.-Y. Cai et al. | Information and Computation 198 (2005) 1-23 5 


their values at n are nonnegative. Throughout this paper, (4” y) will denote (Ey : |y| = m), and (V” y) 
will denote (Vy : |y| = m). 
We now define the symmetric alternation class S2. 


Definition 3.1 ((16,40]). A language L is in S2 if there exists a polynomial-time computable 3-argument 
boolean predicate P and a polynomial p such that, for all x, 


Oxel = > GA) yob), y,z) = 1], and 
(2)x EL = > GAD (VED W LPC, y,z) = 0]. 


(In literature, the class denoted S2 above has had other notations, such as Sf and S% .) Now 
that the reader has seen this formal definition, we repeat the interpretation commented on earlier 
(with a bit more fine print). Namely, we can interpret the above definition as follows. Suppose 
there are two competing all-powerful provers, the Yes-prover and the No-prover, interacting with 
a polynomial-time verifier, P. Given an input string x, the Yes-prover and the No-prover attempt 
to convince the verifier of x € L and of x ¢ L, respectively. To do so, they provide “proofs” y 
and z, respectively. Then the verifier simply checks whether y is a “correct” one for x € L and 
whether z is a “correct” one for x ¢ L. If x € L then the Yes-prover has an irrefutable proof y 
that can withstand any (correct-length!) challenge z from the No-prover; and if x ¢ L then the 
No-prover has an irrefutable proof z that can withstand any (correct-length) challenge y from the 
Yes-prover. 

Since relativizing S2 will be important in this paper, we generalize S> in a flexible way that allows 
us to rigorously specify what we mean by relativized S2, and that also potentially itself opens the 
door to the study of S2-like notions applied to a wide variety of classes of predicates. 


Definition 3.2. Let C be any complexity class. We define S2[C] to be the class of all sets L such that 
there exists a 3-argument boolean predicate P € C and a polynomial q such that 


Oxel e AU) yD), y,z) = 1], and 
(2)x ZL = EDAD PLPC, y,z) = 0]. 


One might alternatively use a pairing function to pair (x, y,z). For a nice class C, all choices of 
pairing functions having the standard properties of pairing functions would yield the same class 
as each other. However, pathological classes C (e.g., classes containing a single set) would be sen- 
sitive to the choice of pairing function. Also, we have followed the Russell-Sundaram feature of 
using the same polynomial bounds on y and z. Again, for nice classes C this yields the same class 
S2[C] as if we had allowed separate polynomials. However, for pathological classes C the one- and 
two-polynomial approaches will change the class defined. 

We now define our relativizations of Sz that give the P-time predicate of S2 access to an oracle. 


! Ifwe wished to, we could alter the verifier in such a way as to remove the “correct-length” restriction on this claim, since 
if one modifies the definition of S2 by replacing az) yy (WP) z) with (4?(*D y)(Vz) and by replacing (aPC) zy (yx) y) 
with (4*1)z) (Vy), the overall class defined is unchanged. 
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(1) For each set A, S4 denotes S2[P4]. 
(2) For each class C, SẸ denotes U jee S4. 


Definition 3.4 (see [18,34]). We say that anondeterministic polynomial-time Turing machine (NPTM) 
M is strong with respect to (an oracle) B, if for all inputs x, M? (x) satisfies: (i) each computation path 
halts in one of the states accept, reject, or “?”, (ii) if there is an accepting path there are no rejecting 
paths, and (iii) if there is a rejecting path there are no accepting paths, and (iv) at least one path 
accepts or rejects. M is said to be robustly strong if M is strong with respect to every oracle B. The 
language defined by M” is the set of all strings x such that M? (x) has at least one accepting path. 


Proposition 3.5 ([34] see also [41, 43]). A language A is in NP? N coNP® ifand only if there isa NPTM 
M such that M is strong with respect to B and A = L(M®). In particular, a set A belongs to NP N coNP 
if and only if there isa NPTM M strong with respect to Ø such that A = L(M). 


Definition 3.6 ([18]). We say that B<*A, if there exists a robustly strong NPTM M such that B = 
L(M4). 


For each a and b such that <{ is a defined reduction, and for each class C, RÉ (C) will denote 
{BIGA € C)[B <e Al}. We say that a class C is closed under polynomial-time many-one reductions if 
| EC EOL <h CREC. 

In the following definition and in invocations of it, (-,-) denotes some fixed, standard pairing 
function (having the standard nice properties such as injectivity, surjectivity, polynomial-time com- 
putability, and polynomial-time invertibility). 


Definition 3.7 ([29]). Let C be a complexity class. A language L is said to be in C/poly if there exist 
a language L’ € C, a function s, and a polynomial p for which the following conditions hold: 


(1) For all n > 0, s(1”) is a string bounded in length by p(n). 
(2) Forallx,xeL — > (x,s(1P)) € L. 


Definition 3.8 (see the survey [32]). For each class C for which relativization is well defined and for 
each set A, we say that A is low for C if C4 = C. For a class D, we say that D is low for C exactly if 
each set in D is low for C. 


Self-reducibility (sometimes called downward self-reducibility) is a central, widely used concept 
in complexity theory, and will be important in this paper.” 


2 Definition 3.9 is a very natural and widely used one ({9], see also [38]). We mention, however, that some authors prefer 
to define Turing self-reducibility not in this length-based way, but rather in terms of allowing general orderings satisfying 
appropriate polynomial-time computability requirements and having the property that there is a polynomial q such that, 
for all x, all strictly descending chains from x are of length at most q(|x|) bits (see [30,37] for full details). We note that 
every claim/theorem made in this paper for Definition 3.9’s length-based notion of self-reducibility also holds under such 
“nice-p-order”-based definition of Turing self-reducibility. 
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Definition 3.9 (see, e.g. [9]). A set B is said to be Turing self-reducible if there is a (clocked, deter- 
ministic) polynomial-time Turing machine M that has the following two properties: 


(1) B= L(M?). 
(2) On each input string x, regardless of the answers it receives to oracle queries, M never queries 
any string of length greater than or equal to |x|. 


Definition 3.10. 


(1) For sets B and C, we say that B is Turing self-reducible with respect to C if there is a (clocked, 
deterministic) polynomial-time Turing machine M such that the following properties hold. 

(a) B = L(M®-°), where in this model M has both an oracle tape for querying B and a separate 
oracle tape for querying C. 

(b) On each input string x, regardless of the answers it receives to previous oracle queries from 
either of its oracles, M never queries on its oracle tape corresponding to B any string of 
length greater than or equal to |x]. 

(2) Fora set B and a class C, we say that B is Turing self-reducible with respect to C if there is a set 

C € C such that B is Turing self-reducible with respect to C. 


All complexity classes (e.g., NP, coNP, ZPP, Mod;P, PSPACE, etc.) have their standard defini- 
tions (see [25]). For clarity, we mention explicitly that, as is standard, Mod,P is the class of all sets 
A such that for some nondeterministic polynomial-time machine M, and each x, it holds that x € A 
if and only if the number of accepting paths of M(x) is not congruent to 0 mod k. 


4. Lowness results for S, 


In this section, we establish some lowness results about S2 and SPENSONE, We also prove some 
lowness transference lemmas. We use these results in Section 5 to obtain collapse results for many 
complexity classes. 


Theorem 4.1. If A € P/poly and A is Turing self-reducible then A is low for So, i.e., S4 = S2. 


Proof. Let A be as in the hypothesis of the theorem. Let L be an arbitrary language in S4. There exist a 
3-argument predicate B € P4 anda polynomial p such that, forallx,(i)x € L = (EPU) y) (YD 2) 
[B(x, y,z) = l],and Gx g L 4 (GPD (VD VIB, y,z) = 0]. Since B € P4 there exists a poly- 
nomial-time oracle Turing machine Mp that decides B with oracle A. Let q be a polynomial such 
that, for all x, y, and z satisfying |y| = |z| = p(|x|), all query strings of Mọ on input (x, y,z) have 
length at most q(|x|) irrespective of its oracle. Since A € P/poly, there exist a language in P and 
an advice function s witnessing that A € P/poly. Let S be the function such that, for all x, Sœ) = 
s(1°)#s(1)#- -- #s(1'*!), where # is a delimiter. Then there exists a polynomial r such that S is poly- 
nomially length-bounded by r and there exists a polynomial-time machine Maay such that for all x 
and n,n > |x|, Magy on (x, S(1")) correctly decides whether x € A. (This is what is sometimes called 
in the literature “strong advice” —advice that works not just at one length but also on all strings up 
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to that given length, see [10].) Since A is Turing self-reducible, there exists a polynomial-time oracle 
Turing machine M,r such that Mr, given A as its oracle, correctly decides A, and such that, for all x, 
irrespective of the oracle, every query string (if any) of Ms, on input x has length strictly less than |x]. 

We first define a deterministic polynomial-time machine that will be called the A-simulator, which 
will take as its input a triple (w, s1,s2) and then will output either Magy ((w, 51)) or Magy ((w, s2)). On 
input (w, 51,52), the A-simulator will first compute Magy ((w, 51)) and Maay ((w, s2)). If they agree on 
their outcome, the A-simulator outputs that outcome and halts. Otherwise, it sets a variable œ to 
w and simulates Msr(œ) answering its queries £ by running both Mag, ((B, 51)) and Magy ((B, s2)) as 
long as they agree. If for some query 8, Maav ((B, s1)) and Maav ((B, 52)) disagree, then the A-simulator 
sets a to 6B and starts over the above procedure. Since Mg; is a self-reduction, the queries are always 
shorter than the input, so the length of a becomes smaller on each iteration. Thus, if the “otherwise” 
case above was reached, then there is eventually a point at which a satisfies (1) Magy((@, 51)) and 
Maay((@, 82)) disagree and (ii) for all queries 6B of Msr on input a, Maav ((B,51)) and Magy ((B, 52)) 
agree. For such an aq, there is exactly one ¢t € {s},52} such that Maqy((q@, t)) agrees with Ms: (œ) when 
all the queries are answered by Maay with ¢ as the advice string (note that, on these particular queries 
made by Msr, using sı as the advice string and using s2 as the advice string produce the exact same 
answers). The 4-simulator finds which of sı and s2 is this ¢ and outputs the value of Maqy((w, t)). 
Since the length of œ decreases each iteration and both Mady and Mg, are polynomial time-bounded, 
the A-simulator runs in polynomial time. 

We show that L is in S2 by developing its verification scheme with the Yes- and No-provers as 
discussed in the paragraph after Definition 3.1. Let x be an input. The Yes-prover’s certificate Y and 
the No-prover’s certificate Z are of the form (y, 51) and (z, 52), respectively, where | y| = |z| = p(|x|) 
and |sj|, |s2| < r(qg(|x|)). The verifier attempts to evaluate B(x, y, z) using sı and s2. To do this, the 
verifier simulates Mp on input (x, y,z). When Mp makes a query, say w, the verifier computes the 
answer from the oracle by running the 4-simulator on input (w, 51,52). The verification process 
clearly runs in polynomial time. 

Suppose x € L. Take the string y to be such that for all z satisfying |z| = p(|x|) it holds that 
B(x, y,z) = 1, and take sı to be S(141)). With sı as the advice string, for all strings w, |w| < q(\xl). 
May correctly decides whether w € A, and thus Msr correctly decides whether w € A with Maqy 
acting as the oracle. This implies that, for all z and s2, the A-simulator on input (w, 51,52) outputs 
Maay((w, 81)), which is the membership of w in A. Thus, the verifier correctly evaluates B(x, y, z). So, 
(y, 51) is an irrefutable certificate. By symmetry, if x ¢ ZL, the No-prover can provide an irrefutable 
certificate for x ¢ L. 














A careful examination of the proof of Theorem 4.1 shows that it can be relativized as follows. 


Theorem 4.2. Let A and B be sets such that A is self-reducible with respect to B. If A € P? /poly then 
S4 c S}. 
One direct consequence of Theorem 4.2 is the following corollary. 


Corollary 4.3. IfA € (NP N coNP)/poly and A is Turing self-reducible (or even Turing self-reducible 
with respect to NP N coNP) then S4 SNPNCONP 


Proof. Suppose that 4 is Turing self-reducible with respect to NP N coNP and that 4 belongs to 
(NP NcoNP)/poly. Let C be a set in NP N coNP such that A € P/poly. Since A is Turing self-re- 
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ducible with respect to NP N coNP, there is a set Din NP N coNP such that 4 is Turing self-reducible 
with respect to D. Select such a D. Let B = {0x |x € C}U {ly | y € D}, i.e., let B be the join of C 
and D. Note that B € NP N coNP, A € P? /poly, and A is Turing self-reducible with respect to B. By 
Theorem 4.2, this implies that S4 C SŽ. Since B € NP N coNP, we have S4 c SNPNCONP. 














Next, we (as Theorem 4.6) strengthen Corollary 4.3. A statement analogous to Theorem 4.1 for 
SECON would be that, for every Turing self-reducible set A in (NP N coNP)/poly, A is low for 


See. i.e., SE CONE? = See This statement would say that, for every NPTM M that is 
strong with respect to A, if we let B = L(M“) then SË c SNPOCONP. There are difficulties in proving 
such a theorem. It seems we need to construct a verifier V running in NP N coNP that can simu- 
late the original verifier V’ running in polynomial time with access to L(M“). To resolve queries 
to L(M“) by V’, V can simulate M. But to do that V has to answer queries to A. We can use the 
“dynamic contest” idea as in proof of Theorem 4.1. Each prover can provide a circuit of appropriate 
size. Then the verifier can first determine the correct circuit using the self-reducing algorithm for 
A and use it to answer the queries. There are difficulties constructing such a verifier (that runs in 
NP N coNP). From the definition of SPENNE. note that the verifier must run in NP N coNP for 
any pair of circuits it is run with respect to. This is not a problem when at least one such circuit 
is a correct circuit. But the case where both circuits are wrong causes trouble. (This would never 
really “happen” when working with smart, honest provers, since the prover on the correct “side” 
would not be so dumb or dishonest as to give a wrong circuit, but nonetheless this is a real problem 
that potentially blocks membership in NP N coNP.) Note that in this case, verifier V might give 
wrong answers for queries to 4 made by the machine M. This amounts to running M with an oracle 
other than A. If we require only that M is strong with respect to 4, M may cease to behave as an 
NP N coNP machine (i.e., it may have both accepting and rejecting paths on the same input). Thus 
the verifier V may not be an NP N coNP machine. Although the honest prover has an irrefutable 
proof, technically speaking V is not an NP N coNP machine. We do not know how to overcome this 
hurdle. We commend it to the reader as an interesting open issue (and, at the suggestion of a referee, 
we also suggest that the reader ponder how the classes NP N coNP/poly and NP /poly N coNP/poly 
relate and potentially differ, see for example the papers [15,18,24]). Here we prove a weaker version, 
where M is required to be strong with respect to every oracle. To prove the theorem, the following 
lemma is useful. 


Lemma 4.4. Let A be Turing self-reducible and A € P/poly. For each set B, if B<FA then SŽ € 
SPENNE, 


Proof. Let B<74A via a robustly strong NPTM Mg. Define the machines Magy and Mg, a “strong 
advice” function S, a polynomial r, and our A-simulator as in the proof of Theorem 4.1. For each 
pair of strings sı and s2, define Lss, = {w | the A-simulator accepts(w, s1, 52)}. 

Let L € SË via a 3-argument predicate R computable in P?, and with p being the polynomial 
setting the length of the proofs. We construct a verifier M, a strong (with respect to the empty set) 
NPTM machine, to show that L € SUM RON: M takes as input a string x and certificates Y = (y,s1) 
and Z = (z,s2) (from the Yes-prover and No-prover, respectively). M simulates R (which is in P?) 
on the input (x, y,z). During the simulation, suppose a query b is made to the oracle B. To an- 
swer the query, M simulates Mg (the strong NPTM that computes B given oracle A) on b. Since 
Mg is nondeterministic, M branches off into many paths, each path simulating one path of Mp. 
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Consider any one path. There may be oracle queries. To answer a query a, M uses the A-simulator 
with input (a, 51,52). (Recall that the 4-simulator is a deterministic polynomial-time algorithm.) Of 
these paths some will end with “?” and others with a decisive answer. Observe that all the paths 
are using the same language Ls, ,, to answer the oracle queries made by Mz. Since Mg is robustly 
strong, irrespective of whether Lss, agrees with A or not, there will be at least one decisive path. 
Furthermore, although the answer to the query b reached by these decisive paths may not agree 
with the set B, they all have the same answer. So we let the “?” paths halt and let the decisive paths 
continue simulating R. Finally, all the paths that finished simulating R (without halting with a “?”) 
will agree on whether or not to accept (x, y,z). Again, there will be at least one path that did not 
halt with a “?” and all such paths have the same outcome, though the outcome may not be the 
same as R(x, y,z). So, M is a strong (with respect to empty set) NPTM. Thus, by Proposition 3.5, 
LM) € NPN coNP. 

As to the correctness of M, note that, for all n, for all strings w such that |w| < n, if either 
sı = S(1”) or s2 = S(1") then it holds that w € A <= > (w,5s}1,82) € Ls,s,. Suppose x € L. Let q bea 
polynomial in |x| that bounds the length of queries to A asked by Mg. There exists a yo such that, 
for all z with |z| = p(|x|), it holds that R(x, yo,z) = 1. Now the Yes-prover has an irrefutable proof 
Y = (yo, S(14*))). Then, irrespective of the s2 given by the No-prover, Lss, will agree with 4 on all 
strings of length up to g. So, M will answer all queries to B made by R correctly. Thus, for all Z such 
that Z = (z,s2), |z| = p(|x|), and |s2| < r(qg(|x|)), it holds that (x, Y,Z) € L(M). By symmetry, ifx ¢ L, 
then there is some Z such that, for all Y such that Y = (y, 51) with |y| = p(|x|) and |s1| < r(q(\x|)), 
it holds that (x, Y, Z) € L(M). 


Lemma 4.5. Let A and D be sets such that A is Turing self-reducible and A € P? /poly. For each set B, 
if B<'fA then SË C So[NP? N coNPP]. 





























Proof. We apply the proof of Lemma 4.4. This time the A-simulator runs with oracle D. 


Theorem 4.6. Let A be a Turing self-reducible (or even self-reducible with respect to NP N coNP) set 
in (NP N coNP)/poly. For each set B, if B<'SA then S} c SNPNCONP | 


Proof. The hypothesis of the theorem implies that for some D € NP N coNP we have A € PP /poly. 
By Lemma 4.5, S? C So[NP? N coNP?]. Since every set in NP N coNP is low for NP (and so low 
for coNP), we have SË c SNPNcoNP, 














We end this section with some lowness transference lemmas. We show that the low sets of S2 are 
also low for ZPPN? and NPN?. To accomplish this, we need a relativized version of Cai’s result 
S2 € ZPPNP [13]. 


Fact 4.7. For each A, S4 C ZPPNP* 


The above fact holds via adapting the proof of Cai into a relativized setting. We do not include 
here a relativized replay of Cai’s proof, but rather we explain the only slightly tricky issue in the 
adaptation. Cai’s proof of Sı © ZPPP in [13] goes as follows: Let L be an arbitrary set in S2. There 
exist a polynomial p and a polynomial-time predicate P that witness the membership of L in S2. Cai 
then designs a ZPP procedure for L that uses SAT as the oracle, where the SAT oracle is used just to 
check the existence of strings that satisfy (or fail to satisfy) P and to enumerate polynomially many 
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such strings. Thus, in the case in which the predicate belongs to P4 for some oracle A, the SAT oracle 
can be replaced by an arbitrary </,-complete language for NP“. This implies that S4 C ZPpNP*. 
A corollary to Fact 4.7 is the following. (Recall that NP N coNP is low for NP.) 


Corollary 4.8. SNPMCONP c ZppNP_ 
We now state our lowness transference lemmas. 
Lemma 4.9. If A is low for S2 then A is low for ZPP? and A is low for NPN?. 
Lemma 4.9 is implied by the following stronger transference lemma. 
Lemma 4.10. If s4 = SNENCONE then A is low for ZPP? and A is low for NP™P. 


Proof. Let S4 c SNPOONP. Then, 


ZPPNP* c ZPP% c ZppS O c ZppZPP™” c ZppNP. 


The first inclusion holds because for each A, NP4 c S4. The second inclusion holds due to the 
hypothesis of the lemma. The third inclusion is due to Corollary 4.8. The last inclusion is well 
known (the result ZPPP? = ZPP [54] relativizes, see also [33]). So A is low for ZPPN?. Lowness for 
NP”? follows from this, since Köbler and Watanabe [33] have noted that ZPPN?-lowness implies 
NPP -lowness (this holds since—using the standard definition of the 3 operator and the fact that 
3. NPNP“ _ 3.3. coNPA = 3-coNPA = NPNP^—if we assume that A is low for ZPPP then we 
obtain NPNP* = 3. coNPA c 3. PNP“ c g. ZPPNP^ = 3. ZPPP c3. NPNP = NPP), 














5. Applications of S, lowness theorems 


In this section, we use our lowness theorems proven in Section 4, and some observations we 
make regarding interactive proof systems, to obtain collapse results for many complexity classes. 
The following proposition and theorems are useful in proving those results. 


Proposition 5.1. NP C S2 C SNPNEONP c SP Td c E$ UTS c SNP c PH C PSPACE. 


We mention in passing that Buhrman and Fortnow (personal communication, 2001) have con- 
structed an oracle separating £} N TI} from S2. 


Theorem 5.2. Let C be any complexity class that has a self-reducible Turing-complete set. Then C C 
P/poly implies SS = S2. Furthermore, if S2 € C, then C C P/poly implies C = Sp. 


Proof. Let B € C be a self-reducible Turing-complete set for C. Suppose C C P/poly. Then B € 
P/poly. Applying Theorem 4.1 to B, we get SË = Sp. Since B is Turing-complete for C, SẸ = SŽ. 
Thus, SS = S2. The second part of the theorem is immediate. 














Theorem 5.3. Let C be any complexity class that has a self-reducible Turing-complete set. Then C C 
(NP N coNP)/poly implies SẸ c SNPOCONP. 
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5.1. Collapse consequences of NP having small circuits 


Karp and Lipton [29] showed that if NP € P/poly then PH = £} N T$. Kébler and Watana- 
be [33] strengthened their result to show that if NP C (NP N coNP)/poly then PH = ZPPP. The 
following theorem shows further strengthenings of this result. 


Theorem 5.4. 


(1) (Hopcroft and Sengupta, see [13]) NP C P/poly => PH = Sp. 
(2) NP C (NP N coNP)/poly => PH = SNPNCONP | 


Proof. As to Part 1, we derive the Hopcroft-Sengupta collapse as a consequence of our lowness 
result. SAT is a self-reducible many-one complete set for NP. Suppose NP C P/poly. By Theo- 
rem 5.2, SNP = S2. So by Proposition 5.1, we have S2 = £} = 114. And, of course, if £} = T} then 
PH = 5$ 
>: 
To prove Part 2, suppose NP C (NP N coNP)/poly. Then, SAT € (NP N coNP)/poly. Thus we 
have, 





P c SNP SAT œ gNPNcoNP P 
M £8." cS CS; C X. 





The first and last inclusions are from Proposition 5.1. To get the third inclusion, observe that SAT 
is Turing self-reducible and apply Corollary 4.3. From the above chain of inclusions, we have 

NPNcoNP NPNcoNP 
SAPONE = E) = M}. So PH = £$ Seo es 














One might wish to say that “Part 2 of Theorem 5.4 is Part 1 of Theorem 5.4 relativized to 
NP N coNP.” This is not a rigorously correct claim, since NP N coNP currently is not known to 
have many-one complete sets (side comment: It is known that NP N coNP has many-one complete 
sets if and only if it has Turing complete sets [19,21]). However, it is intuitively correct, and one can 
give a proof of Part 2 of Theorem 5.4 along these lines; indeed, that is how the authors first saw 
this result. To prove the result this way, one would note that Part 1 of Theorem 5.4 relativizes (i.e., 
one would note the A = B special case of Theorem 5.6), and then would easily sidestep the lack of 
many-one complete sets for NP N coNP via a “set-by-set” argument (just as in [22, Corollary 6], 
which does exactly this for the Karp—Lipton theorem). However, as discussed in far more detail in 
Section 2, in this paper we seek to prove not merely collapse results, which after all are probably 
statements of the form “false implies false,” but rather we seek to establish, right now and uncon- 
ditionally, classes of sets that are simple, i.e., that have lowness properties. Collapse results follow 
immediately from lowness results (e.g., see our proof above of Part 2 of Theorem 5.4). However, even 
beyond that, we feel that lowness/self-reducibility-connection results more fully capture and clarify 
the behavior that yields the collapse results; they are the iceberg of which the conditional-collapse 
results are the flashy tip. 

Theorem 5.4 has consequences in the study of reducing solutions of NP functions. “NP has 
unique solutions” will be used here to mean that there exists a single-valued, nondeterministic poly- 
nomial-time computable (partial) function f such that, for each boolean formula F € SAT, f(F) 
outputs a satisfying assignment of F. Informally put, to ask whether NP has unique solutions is 
to ask whether even a nondeterministic polynomial-time function can cull down to exactly one the 
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collection of satisfying assignments of satisfiable formulas. It is known that NP has unique solu- 
tions if and only if every multivalued NP function has a single-valued refinement (see [24,44] for full 
details on how these notions are formalized). Hemaspaandra et al. [24] prove that if NP has unique 
solutions then the polynomial hierarchy collapses to ZPPN?. Their actual proof involves showing 
that if NP has unique solutions then NP C (NP NcoNP)/poly. Thus, in light of Part 2 of Theorem 
5.4, one has the following stronger collapse consequence from the assumption that NP has unique 
solutions. 


Theorem 5.5. Jf NP has unique solutions then PH = SS One. 


One can for the same reason strengthen to a PH = S ENCONE conclusion a closely related theorem, 


namely, the result of Buhrman et al. [12] that if, in a certain model of access to partial functions, 
the solution function of some “universal relation [2]” is computable in the class “FPNPSVIN ” then 
PH = NPMP. 

We now turn to the following result, which shows that Part 1 of Theorem 5.4 can be relativized 
in a particularly flexible fashion (the natural relativization would simply be the A = B case). 


Theorem 5.6. For any two sets A and B, if NP4 c P? /poly and A € PË then NPNP* € SŽ : 


Proof. We first define a language Univ. The language Unive consists of all tuples (M,x, y, 1”, 
1’,1?*) that satisfy (i) M is a deterministic oracle Turing machine, (ii) |y| + k = J, and (iii) there 
is a string w of length / such that y is a prefix of w and M4 accepts x#w within m steps. In the 
above construction, the string 17 is used as padding to help us decrease lengths in such a way as 
to satisfy the definition of self-reducibility. It is easy to see that Univép is many-one complete for 
NP“. Using the given assumption that A € PË, we next show that Univ¢p is self-reducible with 
respect to B: Given input (M, x, y,1’", 1’, 12%), we first verify that condition (ii) is met. Next, if |y| = J, 
we run M on x#y for m steps, with A as the oracle and accept (reject) if M accepts (rejects). If 
|v| < Z, we use the self-reducibility property of Univyp: (M,x, y,1,1/,17") € Univ{p if and only 
if (M, x, y0,1",1!,124—)) € Unive or (M,x, yl, 1,1!,174-)) € Univigp. Since we added a bit to y 
but shrunk the final argument by two bits, both the query strings will be shorter than the input 
string (we are here assuming that the pairing function is such that it enforces this—and we allow 
the pairing function to be nonsurjective in order to facilitate such enforcement). Thus Univgp is 
self-reducible with respect to A. Since we assumed that 4 € P?, Univ%p is self-reducible with respect 


to B. We now use Theorem 4.2 to get SP C SŽ. Since NPNP* c S we have NPNP* c Se 














We nowimmediately apply Theorem 5.6 toimprove Yap’s theorem. Recall, as mentioned in the in- 
troduction, that Yap’s theorem [53]is NP € coNP/poly => PH = m4 and that the best previously 
known strengthening of it is the result of Köbler and Watanabe [33] that NP C coNP/poly => 
PH = ZPP% . We will further strengthen Yap’s theorem by proving NP € coNP/poly => PH = 
She, This is a strengthening (in the same standard, informal sense that the strengthenings men- 
tioned above are strengthenings) since by Fact 4.7 it holds that Sie ie ZPP™2. Both Yap and 
K6ébler—Watanabe proved their theorems in the more general forms, respectively, “X C TIẸ /poly 
=> PH = Elo for each k > 1” and “£ C M? /poly => PH = ZPP, for each k > 1,” and we 
also will prove our result in a form broad enough to apply to all levels of the polynomial hierarchy, 
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Pp 

namely, we will prove that for each k > 1 it holds that £? c 11? /poly => PH = s k. This is a 
p 

strengthening of Yap and Köbler-Watanabe, since by Fact 4.7 it holds that J ‘ae ZPP, 


Pp 

Corollary 5.7. For each k > |, E} (e m? /poly => PH c€ s) t. In particular, NP C coNP/poly => 
Pues). 

Proof. Assume m? ie =P /poly, which is equivalent to our hypothesis. This easily implies (as observed 
in the proof of [33, Corollary 4.4]) that £7, , C £} /poly, and thus certainly that £}; C P% /poly. 


k+1 = k+1 = 
Now, invoking Theorem 5.6 with A and B both chosen to be some <?, -complete set for ©”, we have 


P P P 
that 7, S Sy. Since Ss; C IM}, (see Fact 4.7), this implies PH = sy, 














Note that the final sentence of the statement of Corollary 5.7 strengthens all known results that 
are based on Yap’s theorem. We limit ourselves to two brief examples. First, the core tool of Chang’s 
[17] very interesting work on approximations and bounded queries is a lemma of Wagner [52] (cited 
in Chang’s [17] paper as Theorem 17 there). The tool is used by Chang’s approximation paper to 
conclude, under a broad variety of assumptions, that the polynomial hierarchy collapses to E$ . 
However, the tool’s proof itself, as one can see clearly from Chang’s sketch of its proof, internally 
obtains that (from its assumptions) NP C coNP/poly, and from there invokes Yap’s theorem to 
conclude PH = aA . Thus, the final sentence of Corollary 5.7 in fact strengthens, to Soe the collapses 
that that tool broadly yields. 

Our second example regards the lovely paper “Improving Known Solutions is Hard,” by Ranjan 
et al. [39]. That paper proves that “if PH # E? , [then] polynomial-time transducers cannot com- 
pute optimal solutions for many problems, even given n!~€ nontrivial solutions, for any € > 0;... 
and [they show that their] results hold even in the presence of randomness” (see their paper for 
definitions of their model, and for their many precisely stated theorems). Their paper repeatedly 
obtains results containing in their statements “if PH + &” and (though they actually simply write 
“unless PH collapses,” what they actually show is the following) “unless PH = a .’ However, as 
one can see clearly from their proofs, these statements are coming in due to Yap’s theorem, and 
thus the theorems can, due to the final sentence of the statement of Corollary 5.7, be, respectively, 
improved to “if PH + SNP” and “unless PH = SP.” Thus, their sufficient condition for ensuring 
that improving known solution is hard can be weakened; that is, their results, when improved in 
light of the results of our paper, provide even stronger evidence that improving known solutions is 
hard. 

Part 2 of Theorem 5.4 improved the collapse consequences that follow from NP C (NPN 
coNP)/poly. In Section 5.2 we will similarly improve such collapse consequences for the cases of 
various other classes, such as UP and FewP. In each case, the conclusions involve S»-related classes. 

We will not extensively discuss what happens if large classes such as Mod-based ones are con- 
tained in P/poly or (NP N coNP)/poly, though we will provide some improvements. The reason we 
will not discuss this extensively is that the assumption that P/poly or (NP N coNP)/poly contains 
such powerful classes (classes that have suitable interactive proof systems, and due to Toda’s the- 
orem, in the presence of the BP operator subsume the polynomial hierarchy [46,47]) is so sweeping 
as to immediately imply collapses that are even deeper than S)-related collapses. In particular, it is 
known that the following holds. 
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Theorem 5.8 (see [33, 36]). 


(1) IfPP C P/poly, then P#? = MA. 
(2) IfPSPACE C P/poly, then PSPACE = MA. 
(3) If Mod;P € P/poly, then Mod;P C MA. 


Theorem 5.8 is proved via the following line of argument. We start with a class C with a many-one 
complete language Le that has an interactive proof system in which the power of the prover lies in 
FP°. We then argue that, C C P/poly implies C C MA. As the classes PP, PSPACE, and Mod,P all 
have the required many-one complete languages, we obtain Theorem 5.8. 

We now (as Theorems 5.9 and 5.10) generalize the above line of argument, and then (as Theorem 
5.13) via our generalization obtain strong new collapse results regarding Mod,P classes. 


Theorem 5.9. Let C be a class closed under polynomial-time many-one reductions and that has a many- 
one complete language Le such that both Le and its complement Le have interactive proof systems in 
which the power of the honest prover lies in FP. Then the following hold. 


(1) C C P/poly => BPP? c MA. 
(2)C c P/poly = NP© c MA. 


Proof. Our proof is in spirit related to the proof of [36, Corollary 8]. We first prove Part 1. Note 
that the statement clearly holds for C = {X*}. So, we will assume that C contains a set that is not 
&*. Since the only class for which &* is many-one complete is the class {=*}, this ensures that the 
many-one complete set Le here is not X*. Suppose C C P/poly. Let Lo = {10y |k 2 OA y € Le}. 
It is easy to see that Lo is polynomial-time many-one equivalent to Le. Since Le is polynomial-time 
many-one complete for C and C is closed under polynomial-time many-one reductions, it holds that 
Lo is polynomial-time many-one complete for C. Since Le and Le have interactive proof systems, 
both Lo and Lo have interactive proof systems. 

Since Lo is many-one complete for C, it suffices to show that BPP% C MA. Since Ly € C and 
C C P/poly, let Magy be a polynomial-time machine that accepts Lo given appropriate advice. Let 
A € BPP” via a bounded-error probabilistic polynomial-time oracle Turing machine M such that 
A=L(M"»)., It is well known that for any given polynomial t(n) the error probability of a BPP- 
machine can be made amplified to being at most 2~“”, namely, by taking the majority vote of 
polynomially many independent runs of the machine (see, e.g. [42]). Using the fact we can assume 
that for all x the error probability of M on input x is at most 2~“*)), where ¢ is a polynomial that 
will be defined later. On an input of length n, the machine M can ask queries of length up to some / 
(which is polynomial in n). Since the exponential reduction in the error probability of M is achieved 
by independent simulations of M, this polynomial / can be determined independently of the choice 
of t (namely, whatever /-bound holds for one simulation of M will also hold for our polynomial 
number of simulations). 

By our assumption, there are interactive proof systems for both Lo and Lo in which the power 
of the honest prover lies in FP’. Since the computational power of honest provers exists in a de- 
terministic complexity class, we can assume that the honest provers are deterministic, and thus, all 
the provers are deterministic. As we did for the machine M, we can assume that the error proba- 
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bilities that characterize the soundness and correctness of the interactive proof systems have been 
exponentially reduced. Indeed, we can assume that the same function 2~“” is used as the bound. 
That is, for each x € Lo (respectively, for each x ¢ Lo), the probability that the system for Lo (re- 
spectively, the system for Zo) rejects given an honest prover is at most 2~“")), and for each x ¢ Lo 
(respectively, for each x € Lo), the probability that the system for Lo (respectively, the system for 
Lo) accepts given any prover is at most 2~“*), Let m’ be a polynomial such that, for each n > 0, 
m' (n) bounds from the above the length of the longest query to the oracle Lo asked by the honest 
prover, when running the interactive proof systems for Lo and Lo on strings of length up to /(n). 
Again, this polynomial m’ is independent of the polynomial t. Define m(n) = /(n) + m' (n). Then for 
all n it holds that m(n) > max(/(n), m'(n)). Let r be the length of advice needed by Magy on strings 
of length up to m. Clearly, r is polynomial in n. 

We now exhibit a Merlin—Arthur game for A. The protocol for an input x is as follows. Merlin first 
gives a string s of length r(|x|). Informally, the hope is that s is a “good” advice string given which 
Maay can correctly decide membership in Lo for all inputs of length up to m(|x|). Of course, Merlin 
may be cheating by giving a “bad” advice string.) Arthur simulates the BPP oracle machine M on 
input x. Suppose M asks a query q. If q is not of the form 1*0y, q is trivially a nonmember of Lo, so 
Arthur returns to the simulation assuming that the oracle answer is in the negative. If q is of the form 
1‘0y but its length is less than m(|x|), then Arthur modifies q by attaching an appropriate number 
of l’s at the beginning of the string so that q has length exactly m(|x|). The membership of this new 
string in Lo is identical to the membership of q in the original form, so Arthur can use this new q 
instead of the original q. Arthur then runs Maqy((q,5)) and obtains an answer a € {accept, reject} 
(which may be incorrect since the string s given by Merlin may be a “bad” advice string). Arthur 
verifies correctness of the answer by simulating the interactive proof system for either Lo or Lo 
on query q, depending on whether a = accept or a = reject, respectively. Since the power of the 
honest prover lies in FP“°, Arthur can simulate the prover. He answers queries of the prover to 
Lo by simulating Maay on the query with s as the advice. After running the proof system, if he is 
convinced that a is the correct answer to query q, he continues to simulate the machine M on x. If he 
is not convinced, he simply halts, and rejects the input x. He performs the above-specified actions 
whenever M asks a query. Finally, if M runs to completion, Arthur outputs the outcome of M. 

Certainly, the game defined in the above runs in polynomial time. Let u be a polynomial bound- 
ing the running time of the game. Suppose x € A. Then Merlin can give a good advice string s. 
Given this advice string, M,qy correctly decides the membership in Lo for all strings of length up 
to m(|x|). So, for each query q of M on input x, Arthur obtains the correct membership of q in Lo 
by simulating Maav. Also, with this advice string s, for each query q of M on input x, the compu- 
tation of the honest prover can be correctly simulated for both Lo and Lo. Since each query of M 
on input x has length m(|x|), the probability that Arthur is not convinced of the correctness of the 
answer it obtains for a query q of M on x is at most 2~“"“"")), The machine M on x with oracle 
Lo rejects with probability at most 27“), The number of queries that Arthur makes on input x 
is certainly bounded by the running time, so it is at most u(|x|). So, the probability that the sim- 
ulation of M deviates from the correct one (via obtaining an incorrect oracle answer) is at most 
u(|x|)2-“"2))_ Thus, the probability that Arthur rejects x given this correct advice string s is at 
most 


aD 4 (1 7 aane a (Zen) 
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This quantity is at most 
2-H) +4 u(x) eam) 


Choose the polynomial ¢ so that for all n > 0 it holds that t(n) > 3 and t(m(n)) > [log u(n)] + 3. 
Then, the probability in question is at most i Hence, the probability that Arthur rejects x given 
this correct advice string s is at most i 

On the other hand, suppose x ¢ A. Let s be an arbitrary string of length r given by Merlin. In 
this case, M on x accepts with probability at most 2~“*) given Lo as the oracle. Arthur may get 
an incorrect answer for a query q, since he runs Maay using the (arbitrary) string s as advice. How- 
ever, when Arthur uses the interactive proof system to verify the answer, the probability that he is 
convinced that the answer is correct is at most 27/"*)) (simply because the answer is incorrect, 
and by the properties of the interactive proof system, any prover has only a low probability of 
convincing the verifier that the answer is correct). Hence, by following an analysis similar to the 
previous case, the probability of Arthur accepting x is at most 1 regardless of the advice string s. 
Hence, A € MA. 

Part 2 is proved along similar lines, with the following changes. Apart from the advice string s, 
Merlin also provides a computational path of the NP oracle machine. Then Arthur simulates the 
NP machine along the given path. 














By examining the proof of Theorem 5.9, we can obtain the following relativized version. 


Theorem 5.10. Let C be a class closed under polynomial-time many-one reductions and that has a 
many-one complete language Le such that both Lç and its complement Le have interactive proof sys- 
tems in which the power of the honest prover lies in FP©. Let A be any language. Then the following 
hold. 


(1) C C P4/poly => BPP? c MA“. 
(2)C c P4/poly => NP? c MA4. 


We can relax the hypotheses of Theorem 5.9, and obtain some weaker conclusions as follows. 


Theorem 5.11. Let C be a class closed under polynomial-time many-one reductions and that has a 
many-one complete language Le having an interactive proof system in which the power of the honest 
prover lies in FP°. Then the following hold. 


(1) CC P/poly = BP -C C MA. 
(2)C c P/poly = 3- C CMA. 


The class NP has a many-one complete language SAT that has an interactive proof system in 
which the power of the prover lies in FPN? (a honest prover can find a satisfying truth assignment us- 
ing self-reducibility). Thus, applying Theorem 5.11 to NP, we can obtain the following known result. 


Corollary 5.12 ([4]). / NP € P/poly then AM = MA. 


For k > 2, we could apply Theorems 5.9 and 5.10 to the class Mod,;P, as these classes satisfy 
the required properties (see also the related discussion within the proof of Theorem 5.13). But by 
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applying these results in concert with a result of Toda and Ogihara, we can obtain even stronger 
results. 


Theorem 5.13. Fix k > 2. 


(1) If Mod,P € P/poly then PHM°%? = MA. 
(2) Let A be a language in PH. If Mod,P C P4/poly then PHM? = MA4. 
(3) IfMod,P € (NP N coNP)/poly then PHM°dP = MANPNCONP. 


Proof. Let us first prove Part 1. Fix k > 2 and suppose Mod;P C P/poly. Mod,;P has the following 
many-one complete language. 


SAT; = {(g,r)|the number of satisfying truth assignments of g is r modulo k}. 


Let #P; denote the class of all functions f for which there exists some g € #P such that, for all x, it 
holds that f(x) = (g(x) mod &) [5]. Observe that pModiP — p#Px_ Babai and Fortnow [5] show that 
#P, hasan interactive proof system in which the power of the honest prover lies in FP*?*. Thus, every 
language in PM°4«P has a proof system in which the power of the honest prover lies in FPM°4+P, In 
particular, the language SAT; and its complement have such proof systems. Thus Mod,P satisfies all 
the requirements of Theorem 5.9. Applying Theorem 5.9 to Mod,P, it follows that BPPM°%«? c MA. 
By a result of Toda and Ogihara [47], it unconditionally holds that PH C BPPM°“P. Tt follows that 
PH = MA. BPPM°&P C MA trivially implies that Mod,P € MA. We conclude that 


PH™Med&kP c PHM! c PH = MA. 
The second inclusion uses the fact that MA S Das (unconditionally). The second part of the theorem 


can be proved by using Theorem 5.10 instead of Theorem 5.9 in the above proof. For Part 3, apply 
Part 2 for each language A € NP N coNP individually. 














Finally, let us briefly discuss what holds for PP and PSPACE. Note that the first part of Theorem 
5.8 can be enhanced from P#? to PH*? as follows. This enhanced theorem will be useful later when 
we study the class CLP. 


Corollary 5.14. Jf PP C P/poly, then PH*? = MA. 


Proof. From Theorem 5.8, the hypothesis certainly implies P*? = MA. So using this we have 


PH#? = PHP”? = PHMA, But, unconditionally, PHM“ c PH c P#? (which itself we already know 
is, under the hypothesis, contained in MA). So the hypothesis indeed implies that PH*? = MA. 














We now may state the following. 


Theorem 5.15. 


(1) If PP < (NP N coNP)/poly, then PH#? = MANPNCONP 
(2) If PSPACE © (NP N coNP)/poly, then PSPACE = MANPOCoNP 


One cannot get these claims from the earlier theorems simply by saying “relativize by NP N 
coNP.” This is due to the problem that was mentioned in the comments made immediately after the 
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proof of Theorem 5.4. In particular, the problem is that NP N coNP has no known (many-one or, 
equivalently for that particular class, Turing) complete sets, so saying “relativize by NP N coNP” 
is not a legal step. However, one can use a “set-by-set” argument (see [22, Corollary 6]). Indeed, 
since PP has many-one complete sets, we can actually use not a “set-by-set” approach but can fix 
on a single set that, while potentially not many-one complete for NP N coNP will be good enough 
for the purposes of our proof. To be explicit about this, let us prove the first part of the above 
theorem. Assume PP C (NPM coNP)/poly. Let B be an arbitrary many-one complete set for PP. 
So there is a set Æ € NP N coNP such that B € {A}/poly. Due to B’s many-one completeness, we 
easily have that PP c P4/poly. By Theorem 5.10 (either part), which applies since for PP there is 
a many-one complete language that has an interactive proof system in which the 2 power of the 
honest prover belongs to FP??, we certainly may conclude that PPP c MANPMCONP. But, given 
that PPP c MANP©ONP. note that PH#P c PHPP c PHMAN" c PH c PPP c MANPreONP c 
PH*?. So PH”? = MANPNCONP ag desired. Since for PSPACE there is a many-one complete lan- 
guage that has an interactive proof system in which the power of the honest prover belongs to 
FPPSPACE one can similarly conclude the other part of the above theorem. 


5.2. Results in the absence of self-reducible many-one complete sets 


Theorem 4.1 connects nonuniform containments with uniform collapse consequences for clas- 
ses having self-reducible many-one complete sets. But there are some complexity classes for which 
self-reducible many-one complete sets are not known. In this section, we handle some such classes. 

We first show that Theorem 4.1 can even be applied to some classes C that potentially lack many- 
one complete sets, but that do satisfy C C R4,(C N Turing-self-reducible), i.e., classes whose Turing 
self-reducible sets are known to be, in some sense, “collectively” many-one complete for the class. 
For example, neither UP nor FewP is known to have many-one complete sets, and indeed each 
is known to lack many-one complete sets—and even Turing-complete sets—in relativized worlds 
[20,23]. Nonetheless we have the following claim. 


Theorem 5.16. Let C be any member of this list: UP, coUP, FewP, coFewP. If C C P/poly then C is 
low for each of S2, ZPPN? , and NPY. 


Proof. We prove just the UP case. The FewP case is similar. The coUP and coFewP cases follow 
from the UP and FewP cases, respectively, since 


C CP/poly = > coC C P/poly. 


Assume UP C P/poly. Let B be an arbitrary set in ee Let D € UP be a set such that B € SẸ. For 
each set E € UP, there exists a 2-disjunctively self-reducible set Ag € UP such that E <h Ag. (For 
example, if E is accepted by UP-like machine M which runs in time n* + k, then we can take Ag to 
be, with the pairing function appropriately chosen, {(x, u,0/) | 2(\x|* + k — |u|) = j and there is an 
accepting path of M on input x having u as a prefix}.) So, since UP C P/poly, by Theorem 4.1 we 
have so = S2. Since D <$, Ap, Ss? € g? = So. It follows that Sse = S2. By Lemma 4.9 we obtain 
lowness for ZPPN? and NPP. 














It is easy to see that (i) for each E € UP there is a set Ag that is in UP, is Turing (and even 
2-disjunctively) self-reducible, and satisfies E <$, Ag (in fact, this in effect has just been used in the 
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proof of Theorem 5.16); and (11) for each E € FewP there is a set Ag that is in FewP, is Turing (and 
even 2-disjunctively) self-reducible, and that satisfies E <$, Ag. With these facts in hand, it is easy 
in light of Corollary 4.3 to obtain the following theorem. 


Theorem 5.17. 


(1) UP € (NPM coNP)/poly => SYP c SNPNcoNP. 
(2) FewP C (NPN coNP)/poly => SkewP c SNPAcoNP. 


The final complexity class that we consider is C=P [45,51]. (A set A is in C_P exactly if there is 
a #P function f and a polynomial-time computable function g such that, for each x, it holds that 
xed 4 f(x) = g(x).) Our goal is to prove a complexity class collapse from the assumption that 
CP C (NP N coNP)/poly. However, C=P is not known to have self-reducible many-one complete 
sets, and so Theorem 4.1 cannot be used directly. We will use the following lemma to gain some 
leverage against the class C_P. 


Lemma 5.18. If C-P C P/poly then P#? c P/poly. 


Proof. Suppose C_P C P/poly. Since P#? = PPP and NPPP = NPC? (due to Toran [48]), we 
have P#P c NPP, so P#P c NP/poly. Since coNP c C_P and co(P/poly) = P/poly, we have 
NP/poly € (P /poly) /poly = P/poly. Thus, P*? c P/poly. 


Theorem 5.19. If CP C P/poly then PH*? = PH = SS-P = S, = MA. 














Proof. By our assumption and Lemma 5.18, P#? c P/poly. This implies PP € P/poly. So by part 1 
of Theorem 5.8 we have PH*? = MA. It holds unconditionally that MA C Sp, p c PH*? and 
PH*? = PHC., So we have the desired conclusion. 














The following result shows what holds under the assumption C_P C (NP N coNP)/poly. 
Theorem 5.20. If C-P ¢ (NP N coNP)/poly then PH#? = MANPMCONP. 


Proof. Suppose that CP C (NP N coNP)/poly. Then coC_P € (NP N coNP)/poly. Since NPP? = 
NPC= (again due to Toran [48]), PP C NPPP c NPOP c NPINPNCONP)/poly c NPNPNCONP oly, 
and so PP c NPNPNONP /poly. Since NPNPOCONP — NP and NP C coC_P, we have PP C NP/poly € 
coC_P/poly € oe N coNP)/poly)/poly € (NP N coNP)/poly. By part 1 of Theorem 5.15, this 
implies that PH*? = MANPMCONP_ 














6. Open questions 


We state some open issues. Can Theorem 4.1 be strengthened to the following claim: If A is Turing 
self-reducible and A € (NP NcoNP)/poly, then A is low for S2? Can one prove that SEN = 8)? 
The latter would imply the former. The questions touch upon an interesting issue, namely, before 
the work of Cai/Hopcroft-Sengupta, for over a decade NP C P/poly and NP C (NP N coNP)/poly 
were thought to imply the same strength of collapse: first PH = NPN? [1,22,28,29] and later PH = 
ZPPNP [33]. 
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Cai’s result S2 C ZPPNP shows that the Hopcroft-Sengupta consequence from NP € P/poly, 
namely PH = Sy, is actually the strongest currently known collapse that follows from NP C P/poly. 
The present paper shows that NP C (NP N coNP)/poly implies PH = SXP NP. This is the stron- 
gest currently known collapse from the assumption NP C (NP N coNP)/poly. Thus the best col- 
lapses known from NP C P/poly and NP C (NP N coNP)/poly currently differ. 

Cai et al. [15] have given a fine-grained analysis of robustly strong reductions and so have shown 
strengthenings of previous Karp—Lipton-type results. It would be interesting to see whether a similar 
“fine structure of reductions” approach could yield strengthening in the present context. 

Finally, our lowness results are stated for Turing self-reducibility. However, as mentioned in 
Section 3, our results even hold for “nice-p-order”-based self-reducibility, a more general notion 
that allows self-reduction trees to have polynomially long paths (rather than the linearly-long 
paths of Turing self-reducibility trees). Though a wide array of natural classes have many-one 
complete sets that have both types of self-reducibility, researchers have also studied even more gen- 
eral notions of self-reducibility that capture some additional complexity classes such as C_P (see 
[6]), via allowing very long paths. Such notions even have lowness theorems supporting x -type 
and ZPPNP-type results (see [6,33]). Can one extend our lowness results to such extremely gener- 
al self-reducibility notions? It seems that doing so would require a proof approach substantially 
different from that of Theorem 4.1, since the dynamic contest procedure in the proof of Theorem 
4.1 makes the proof crucially depend on the self-reducibility trees having polynomially bounded 
depth. 
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